Tag Info

XTS works by encrypting each plaintext block with XEX, and specifies which tweak to use.
The benefit of applying the tweak to the blockcipher output is that it makes XEX secure against chosen-ciphertext attacks.
If T is the tweak and E is the underlying blockcipher, we could consider a variant of XEX without the second application of the tweak: ...